C:\Users\GANGSTA\Desktop\runpe\obj\Release\microsoft.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a0d8e2c20af4604a3592fa5d6b0a14f1_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
a0d8e2c20af4604a3592fa5d6b0a14f1_JaffaCakes118
-
Size
354KB
-
MD5
a0d8e2c20af4604a3592fa5d6b0a14f1
-
SHA1
547907101bd0266c563391ad8a621dd47c883558
-
SHA256
c4d929b3f4c7272469e97b0ffee76927a0906d88a1e93fb967035297ed904c30
-
SHA512
6c6b54aeb62fd3245333c4556f72e9fe8eca1cf332debe862e6e21a2b2d227ddcd9d7bb8c86b688bf672d4ca3c55c39863b0f1053fba6a354cb6c4b39c3fd6d8
-
SSDEEP
6144:7/ACV4TCp2NtUQ/Lox7J0nK9QRldYWuZYlrr/GpeT/CKMgyTTOvaluSOdHzAzY74:7/ACV4Tcw88Rl2ZMrGpeT/nMXTSrSOdu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource a0d8e2c20af4604a3592fa5d6b0a14f1_JaffaCakes118
Files
-
a0d8e2c20af4604a3592fa5d6b0a14f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 109B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 287KB - Virtual size: 287KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ